Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9bbe74-ac98-43ac-b18f-625406c2fb0e/1/5NKy_S_tnnIpn4zw4YzesD4wz_U.roa
File: 5NKy_S_tnnIpn4zw4YzesD4wz_U.roa (raw, json)
Hash identifier: Yl/Qv7oOtAsnqv3rnGvkNdq9gXsrT/ikASICuttpnVg=
Subject key identifier: E4:D2:B2:FD:2F:ED:9E:72:29:9F:8C:F0:E1:8C:DE:B0:3E:30:CF:F5
Certificate issuer: /CN=f2f9500a84f2ce90c4214748acb3835d6c56d96c
Certificate serial: 09047763
Authority key identifier: F2:F9:50:0A:84:F2:CE:90:C4:21:47:48:AC:B3:83:5D:6C:56:D9:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8vlQCoTyzpDEIUdIrLODXWxW2Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9bbe74-ac98-43ac-b18f-625406c2fb0e/1/5NKy_S_tnnIpn4zw4YzesD4wz_U.roa
Signing time: Fri 11 Feb 2022 10:17:35 +0000
ROA not before: Fri 11 Feb 2022 10:17:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44188
IP address blocks: 185.165.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151287651 (0x9047763)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2f9500a84f2ce90c4214748acb3835d6c56d96c
Validity
Not Before: Feb 11 10:17:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e4d2b2fd2fed9e72299f8cf0e18cdeb03e30cff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:55:20:20:0f:41:b9:a8:51:57:99:5b:9d:5c:
4b:0c:22:b2:db:ef:b2:0e:f1:09:f6:4f:45:a7:d1:
72:80:bc:00:c8:06:dc:75:f9:09:6b:5f:7c:78:45:
ff:d1:3b:41:8e:c4:6b:ed:4f:2c:12:8a:15:79:51:
ad:a2:8c:6a:28:02:eb:1d:8b:7b:b5:04:74:92:fb:
67:58:32:57:29:99:b8:82:41:e9:d7:11:49:98:97:
1d:19:e4:88:4b:f7:39:fe:33:cf:68:36:20:26:a1:
ac:be:14:7e:d8:79:77:ad:b2:78:f6:d7:09:f7:af:
55:18:fe:da:e9:0d:24:33:66:cd:64:a6:e3:5b:2f:
36:51:49:fc:8e:2c:ca:76:20:61:b1:43:d6:a5:43:
55:1d:8b:51:8f:36:09:2b:bc:39:f2:f4:bd:98:22:
2b:99:11:95:8c:fc:d8:b1:ee:2a:a3:89:c9:cd:43:
cb:47:4c:02:2b:e7:6d:7c:2d:43:ac:a2:25:89:f2:
52:b6:28:34:40:9f:0a:a7:37:86:56:48:9e:8a:2a:
18:53:6c:8c:a6:3b:62:61:ea:4e:e2:c3:f0:09:d2:
cb:55:9a:c5:61:d2:a8:7e:a7:52:37:dc:1a:a9:3f:
10:80:88:fe:71:b1:b6:0b:16:60:c6:cb:14:79:fa:
53:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D2:B2:FD:2F:ED:9E:72:29:9F:8C:F0:E1:8C:DE:B0:3E:30:CF:F5
X509v3 Authority Key Identifier:
keyid:F2:F9:50:0A:84:F2:CE:90:C4:21:47:48:AC:B3:83:5D:6C:56:D9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8vlQCoTyzpDEIUdIrLODXWxW2Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9bbe74-ac98-43ac-b18f-625406c2fb0e/1/5NKy_S_tnnIpn4zw4YzesD4wz_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9bbe74-ac98-43ac-b18f-625406c2fb0e/1/8vlQCoTyzpDEIUdIrLODXWxW2Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.4.0/24
Signature Algorithm: sha256WithRSAEncryption
14:b8:60:b0:73:7e:12:ea:fa:b8:93:04:dd:44:ca:03:6a:2a:
1d:cb:e5:05:b6:05:41:7d:e6:ad:6d:a9:24:61:34:24:6d:21:
bb:43:5e:00:2f:9b:db:58:96:27:6d:ea:d6:1e:49:44:62:92:
e0:4b:51:d4:3b:9f:5e:60:16:fb:47:7f:cd:6d:34:f7:48:e4:
df:e8:9e:39:b2:58:34:cb:08:da:6c:fd:ce:fa:34:c5:93:ab:
06:a9:ea:42:c6:1c:c0:70:fb:c1:ca:09:29:7c:15:f3:39:3d:
35:a0:0c:d5:19:bc:ee:86:61:c1:e2:a6:ce:d6:38:56:2d:b8:
74:92:80:cb:ea:6f:08:6b:a1:4d:b2:9c:19:74:c9:55:51:58:
0a:93:f1:a0:57:c5:55:95:93:39:22:f9:5c:21:82:c5:50:f4:
86:96:1b:b3:97:e9:8a:89:2a:80:25:b2:38:af:42:4e:ca:9e:
4f:69:4c:01:2d:50:1c:e5:b0:3b:5a:47:59:eb:ad:10:3e:83:
cf:21:a0:ff:48:83:29:91:6a:ac:47:fd:80:82:39:cf:f5:f0:
bc:95:34:a1:15:6f:96:ce:4c:2d:a1:7d:65:2e:4c:e7:cd:33:
87:aa:8f:8a:22:81:fa:e1:7c:31:cb:c0:3b:76:70:4a:76:a8:
26:d7:51:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:25 2023 by rpki-client on console-fra.rpki-client.org